Home > Vulnerability Database > CVE-2013-5036

WhiteSource Vulnerability Database

CVE-2013-5036

Good to know:

Date: May 27, 2014

The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb.

Language: PHP

Severity Score

7.5

Related Resources (5)

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-5036

Url: http://osvdb.org/95992

Url: https://github.com/SquareSquash/web/commit/6d667c19e96e4f23dccbfbe24afeebd18e98e1c5

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/86335

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2013-5036

Severity Score

7.5

Weakness Type (CWE)

Code Injection

CWE-94

Top Fix

Upgrade Version

No fix version available

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2013-5036

Good to know:

Date: May 27, 2014

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?